Malicious code in dashloom (PyPI)

Source: kam193 ba0285d49d46cd93cdcad1582bb1c013beb3791dc901a0a3c96f3801dba9d909 This package is prepared to be used as a malicious loader. It pins pydash dependency in a vulnerable version allowing reaching out of the object scope when calling pydash.invoke.... The code to reach it is intended to...